$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: eQ2wemuzxa9Jwxkt8icPx0I+JRONneubWIhZbe7c0bs= Subject key identifier: 3F:F5:82:57:D3:56:C1:CB:FA:B8:6E:6B:40:A5:1C:09:D6:39:2D:64 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 3493 Signing time: Mon 12 May 2025 14:16:56 +0000 Manifest this update: Mon 12 May 2025 14:16:56 +0000 Manifest next update: Mon 19 May 2025 14:16:56 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: 49GtkuXTNdHE9G3Djgjl9xhP5RFV8e5BLdZJKrN/K+0=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: May 12 14:16:56 2025 GMT Not After : May 19 14:16:56 2025 GMT Subject: CN=682202d8-4321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:03:64:51:2f:8c:43:6d:62:0c:93:14:06: d0:19:70:5a:c3:47:b4:70:97:06:f0:1d:92:57:72: 9f:d0:a1:38:70:b3:50:be:0a:04:6c:3d:d4:ba:1a: cb:dc:8a:a7:3b:59:23:d3:1a:d1:c0:e8:b3:8e:72: cb:58:de:89:84:60:42:ab:52:58:5a:bb:0c:75:d6: f4:ed:67:31:18:7c:4e:7f:d4:1c:f0:75:a7:13:1f: 8c:d4:57:b5:83:e4:cf:a4:ce:f3:81:dd:e0:87:ec: 7f:b2:21:e5:b1:0c:3e:51:3e:18:f7:d6:28:bb:ae: fe:1f:e1:e1:95:e1:d4:5a:f8:0c:26:bf:df:e1:12: 61:cb:f3:60:cc:d1:f1:41:6e:b1:28:81:77:84:71: e9:aa:a7:7e:7d:b9:67:4f:a0:36:c9:89:4e:1d:a4: 46:c1:85:8c:d5:57:78:c0:04:4e:40:1c:68:8a:d1: 81:78:61:a5:80:75:37:f2:32:a9:db:e9:7e:53:e3: 97:40:74:32:9f:21:6a:e0:34:48:53:ef:3b:1a:45: 92:40:03:e6:f5:48:e4:d3:23:85:f2:24:01:5b:5e: 5b:17:a9:67:48:68:8a:a6:03:68:7b:b5:14:ae:0c: 45:a2:f8:ea:2a:82:e2:81:03:11:67:07:a5:02:0d: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:82:57:D3:56:C1:CB:FA:B8:6E:6B:40:A5:1C:09:D6:39:2D:64 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:a5:5c:58:f4:cb:80:39:aa:09:ee:65:f2:2d:26:66:e4: be:09:00:10:9b:be:d9:46:6d:70:8e:c4:e0:0f:1a:24:0c:86: ca:2f:e9:4f:77:d5:90:c1:8e:01:8e:a4:bf:bc:b3:62:61:a0: 92:2a:68:43:ab:19:46:76:04:1d:c5:d1:81:fe:d7:59:38:da: 2e:fb:44:57:ac:f4:4e:08:55:9f:44:20:1f:53:7e:d1:00:85: e3:dc:2b:71:bd:db:1f:a5:01:44:d1:c6:af:1e:5a:f1:d3:78: f0:23:3b:07:c5:c1:84:62:b0:a3:84:d1:7e:86:0a:07:24:28: e4:e5:eb:a3:52:cb:d2:47:19:a4:07:8b:09:5c:4b:cc:8b:9f: 83:fc:42:03:f4:5e:3b:14:d8:07:7e:e6:9b:fc:c1:57:fc:b0: 4e:d6:f7:eb:2c:64:ca:01:1b:11:07:6c:2d:4c:98:13:40:12: a5:e6:d6:6e:c5:07:fa:f3:35:bb:7a:e0:75:09:ea:45:ca:0f: 9a:56:6a:4a:9f:59:e7:ed:95:72:df:4f:e2:e6:5b:53:4e:3a: fd:75:db:f7:2e:23:95:1e:6c:45:20:03:52:b4:fc:aa:78:1a: a5:7b:46:72:11:54:ac:a5:20:0d:9b:31:c3:b0:7e:ae:12:6d: 9e:8e:e1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUwNTEyMTQxNjU2WhcNMjUwNTE5MTQxNjU2WjAYMRYwFAYD VQQDEw02ODIyMDJkOC00MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogcDZFEvjENtYgyTFAbQGXBaw0e0cJcG8B2SV3Kf0KE4cLNQvgoEbD3UuhrL 3IqnO1kj0xrRwOizjnLLWN6JhGBCq1JYWrsMddb07WcxGHxOf9Qc8HWnEx+M1Fe1 g+TPpM7zgd3gh+x/siHlsQw+UT4Y99You67+H+HhleHUWvgMJr/f4RJhy/NgzNHx QW6xKIF3hHHpqqd+fblnT6A2yYlOHaRGwYWM1Vd4wAROQBxoitGBeGGlgHU38jKp 2+l+U+OXQHQynyFq4DRIU+87GkWSQAPm9Ujk0yOF8iQBW15bF6lnSGiKpgNoe7UU rgxFovjqKoLigQMRZwelAg0a4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/1glfT VsHL+rhua0ClHAnWOS1kMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxwKVcWPTLgDmqCe5l8i0mZuS+CQAQm77ZRm1wjsTgDxokDIbKL+lP d9WQwY4BjqS/vLNiYaCSKmhDqxlGdgQdxdGB/tdZONou+0RXrPROCFWfRCAfU37R AIXj3CtxvdsfpQFE0cavHlrx03jwIzsHxcGEYrCjhNF+hgoHJCjk5eujUsvSRxmk B4sJXEvMi5+D/EID9F47FNgHfuab/MFX/LBO1vfrLGTKARsRB2wtTJgTQBKl5tZu xQf68zW7euB1CepFyg+aVmpKn1nn7ZVy30/i5ltTTjr9ddv3LiOVHmxFIANStPyq eBqle0ZyEVSspSANmzHDsH6uEm2ejuG3 -----END CERTIFICATE-----Generated at Tue May 13 09:18:36 2025 by rpki-client